U:\ngrzSmuiATvfd\ndedlsdeiGC\eRcwsnR\aWOpnndck\SizvyyxOo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9bf61ad0e1173f910388a68f58c0612766592c41f1ab463445d36f105b4b5b30N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9bf61ad0e1173f910388a68f58c0612766592c41f1ab463445d36f105b4b5b30N.exe
Resource
win10v2004-20240802-en
General
-
Target
9bf61ad0e1173f910388a68f58c0612766592c41f1ab463445d36f105b4b5b30N
-
Size
45KB
-
MD5
f78eb2e794dc50560042115904047260
-
SHA1
c22b94927a013cb7845b37d4fd8125737707cbca
-
SHA256
9bf61ad0e1173f910388a68f58c0612766592c41f1ab463445d36f105b4b5b30
-
SHA512
2c01ab16f7c1be28b7f26fa95da7b78d6d9f538311850bed19070af2004baf14848c6fd8e713764a086760fe37ed0d346d4a8ba7bdbeaff7b6718465d7619376
-
SSDEEP
768:EIjDK3kvBvIf6XcSF/+SsKMhP0Ws3n/XmQUSAZqJysDe//uh3ETBnl2TQ8926:EInKUVLXTGSEK2QmVM3sTr8A6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bf61ad0e1173f910388a68f58c0612766592c41f1ab463445d36f105b4b5b30N
Files
-
9bf61ad0e1173f910388a68f58c0612766592c41f1ab463445d36f105b4b5b30N.exe windows:5 windows x86 arch:x86
c273af4a062b1c6aa8542b460bed800f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
ExtFloodFill
LPtoDP
OffsetRgn
ScaleViewportExtEx
user32
CreateDialogParamA
CharLowerBuffW
GetDC
GetClassLongA
FindWindowExW
InvalidateRect
wsprintfW
TranslateAcceleratorW
shlwapi
UrlGetLocationW
ChrCmpIW
msvcrt
_controlfp
__set_app_type
__p__fmode
clearerr
__p__commode
_amsg_exit
atoi
_initterm
memset
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
kernel32
RemoveDirectoryW
lstrcmpiW
LoadLibraryExA
LoadLibraryA
GetLastError
CompareStringW
DefineDosDeviceW
lstrlenA
GetModuleFileNameA
FlushFileBuffers
VirtualAlloc
Exports
Exports
?CreateDlgMessage@@YGHPAXPADK|U
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idir Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE